23 new controls, mostly data privacy, with STRM for 10 laws and frameworks, including the EU GDPR and India DPDPA.
Measure
SCF 2024.4
SCF 2025.1
Change
Total Controls
1241
1264
Domains
33
33
Laws, Regulations & Frameworks
250
250
With Published STRM
40
71
23
What Changed In This Release
23 new controls, led by Data Privacy (PRI, 10), plus compliance, HR and patching controls.
19 renamed and 37 wordsmithed.
STRM added for the EU GDPR, India DPDPA, Saudi Arabia PDPL, UAE NIAF, UK Def Stan 05-138, the US Data Privacy Framework and the Oregon and Texas privacy acts.
10 older privacy laws retired, including the EU ePrivacy Directive.
%20(white).png)
.png)